How many CVEs have a located fix in RIOT-OS/RIOT?

27 published CVEs have a fix traced to functions in RIOT-OS/RIOT, touching 64 functions across 29 files.

Which function in RIOT-OS/RIOT has been patched by the most CVEs?

gnrc_sixlowpan_iphc_recv in sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c has been changed by 7 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in RIOT-OS/RIOT?

The median fix changes 30 lines. 44% of fixes change 20 lines or fewer, and 37% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#182 of 500 repositories

RIOT-OS/RIOT

Name: RIOT-OS/RIOT: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 9, 2026

27

CVE fixes located

Published CVEs

64

Functions patched

Distinct function sites

29

Files patched

Distinct source files

2017–2026

Years covered

By CVE publication date

Overview

27 published CVEs have a fix traced to functions in RIOT-OS/RIOT, the earliest published in 2017. Those fixes changed 64 distinct functions across 29 files, in 418 patch hunks.

Among the 500 repositories tracked here, RIOT-OS/RIOT ranks #182 by the number of CVEs with a located fix.

Most patched functions

Functions in RIOT-OS/RIOT changed by the most CVE fixes.

Most patched files

Files in RIOT-OS/RIOT changed by the most CVE fixes.

1sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c8 CVEs · 4 functions
2sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c7 CVEs · 3 functions
3sys/net/gnrc/network_layer/sixlowpan/frag/vrb/gnrc_sixlowpan_frag_vrb.c6 CVEs · 3 functions
4sys/net/gnrc/netif/ieee802154/gnrc_netif_ieee802154.c6 CVEs · 1 functions
5sys/net/link_layer/ieee802154/ieee802154.c6 CVEs · 1 functions
6sys/net/application_layer/nanocoap/fileserver.c2 CVEs · 7 functions
7sys/net/gnrc/network_layer/sixlowpan/frag/sfr/gnrc_sixlowpan_frag_sfr.c2 CVEs · 6 functions
8sys/uri_parser/uri_parser.c2 CVEs · 4 functions
9sys/clif/clif.c2 CVEs · 1 functions
10sys/net/application_layer/nanocoap/sock.c1 CVEs · 6 functions

Fix size

How much code a CVE fix in RIOT-OS/RIOT changes, with backports counted once.

30

Median lines changed

Added plus removed, per CVE

44%

Fixes of 20 lines or fewer

Share of CVE fixes

37%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in RIOT-OS/RIOT, and the functions each fix changed.

RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion
CVE-2026-107838_put_directory _put_file _get_directory
High · CVSS 7.5
EPSS 0.3%2026-10-09
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling
CVE-2026-107837sixlowpan_frag_is_snip _receive
High · CVSS 8.2
EPSS 0.4%2026-10-09
RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size
CVE-2026-107836_block_cb nanocoap_sock_get_slice nanocoap_sock_get_blockwise
High · CVSS 7.1
EPSS 0.3%2026-10-09
RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c
CVE-2025-53888l2filter_add
Medium · CVSS 6.6
EPSS 0.8%2025-07-18
CVE-2024-53980
CVE-2024-53980cc2538_irq_handler
Medium · CVSS 6.9
EPSS 0.8%2024-11-29
CVE-2023-33975
CVE-2023-33975sixlowpan_sfr_rfrag_is
Critical · CVSS 9.8
EPSS 1.5%2023-05-30
RIOT-OS vulnerable to Race Condition in SFR Timeout
CVE-2023-33974_arq_scheduled _clean_slate_datagram gnrc_sixlowpan_frag_sfr_arq_timeout
High · CVSS 7.5
EPSS 0.7%2023-05-30
CVE-2023-33973
CVE-2023-33973gnrc_sixlowpan_iphc_send _iphc_ipv6_encode
High · CVSS 7.5
EPSS 1.0%2023-05-30
CVE-2023-24826
CVE-2023-24826gnrc_sixlowpan_frag_sfr_init gnrc_sixlowpan_frag_sfr_send
High · CVSS 7.5
EPSS 0.8%2023-05-30
CVE-2023-24825
CVE-2023-24825gnrc_sixlowpan_iphc_recv
High · CVSS 7.5
EPSS 1.0%2023-05-30
RIOT-OS vulnerable to Out of Bounds write in routing with SRH
CVE-2023-24817gnrc_rpl_srh_process
High · CVSS 7.5
EPSS 0.6%2023-05-30
RIOT-OS vulnerable to Packet Type Confusion during IPHC send
CVE-2023-24823gnrc_sixlowpan_iphc_recv ieee802154_get_frame_hdr_len _iphc_encode
Critical · CVSS 9.8
EPSS 1.0%2023-04-24

Get an alert for each new RIOT-OS/RIOT CVE, with the patched functions and AI-written analysis.

Monitor RIOT CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

axios/axios27 CVEs bytecodealliance/wasmtime27 CVEs GNOME/gimp27 CVEs kanboard/kanboard27 CVEs MacWarrior/clipbucket-v527 CVEs nimiq/core-rs-albatross27 CVEs saltstack/salt27 CVEs strukturag/libheif27 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in RIOT-OS/RIOT.

How many CVEs have a located fix in RIOT-OS/RIOT?: 27 published CVEs have a fix traced to functions in RIOT-OS/RIOT, touching 64 functions across 29 files.
Which function in RIOT-OS/RIOT has been patched by the most CVEs?: gnrc_sixlowpan_iphc_recv in sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c has been changed by 7 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in RIOT-OS/RIOT?: The median fix changes 30 lines. 44% of fixes change 20 lines or fewer, and 37% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track RIOT-OS/RIOT CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing